Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 5 question 10 discussion

Actual exam question from Microsoft's AZ-500

Question #: 10
Topic #: 5

HOTSPOT -
You have the Azure key vaults shown in the following table.

KV1 stores a secret named Secret1 and a key for a managed storage account named Key1.
You back up Secret1 and Key1.
To which key vaults can you restore each backup? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

The backups can only be restored to key vaults in the same subscription and same geography. You can restore to a different region in the same geography.

by Sethoo at March 17, 2021, 9:53 a.m.

Comments

Submit Cancel

Sethoo

Highly Voted 4 years, 3 months ago

I will go with the given answers -"When you back up a key vault object, such as a secret, key, or certificate, the backup operation will download the object as an encrypted blob. This blob can't be decrypted outside of Azure. To get usable data from this blob, you must restore the blob into a key vault within the same Azure subscription and Azure geography https://docs.microsoft.com/en-us/azure/key-vault/general/backup

upvoted 35 times

JohnRe

4 years, 1 month ago

Yep, same Azure subscription and Azure geography including the paired region.

upvoted 6 times

...

majstor86

Highly Voted 2 years, 4 months ago

Restore the Secret1: KV1, KV2 and KV3 Restore the Key1: KV1, KV2 and KV3

upvoted 7 times

...

AZ5002023

Most Recent 1 year, 7 months ago

i thnink that before you pass an azure certification exam you should have skills in geography ...

upvoted 7 times

nExoR

11 months, 1 week ago

..and english proficiency as 'geography' may be understood differently. Azure Geography: Definition: A geography is a grouping of Azure regions that adhere to data residency and compliance requirements specific to a particular country or group of countries. Azure geographies ensure that data residency, sovereignty, and compliance needs are met according to local laws and regulations.

upvoted 3 times

...

wardy1983

1 year, 8 months ago

The backups can only be restored to key vaults in the same subscription and same geography. You can restore to a different region in the same geography.

upvoted 1 times

...

AzureAdventure

1 year, 9 months ago

if these conditions meets, so its possible -Both of the Azure regions belong to the same geography. -Both of the key vaults belong to the same Azure subscription.

upvoted 1 times

...

fireb

1 year, 10 months ago

The answers are correct. https://learn.microsoft.com/en-us/azure/key-vault/general/overview-security-worlds#:~:text=own%20security%20worlds.-,Backup%20and%20restore%20behavior,to%20the%20same%20Azure%20subscription.

upvoted 2 times

...

_fvt

1 year, 11 months ago

Answers are correct. https://learn.microsoft.com/en-us/azure/key-vault/general/backup?tabs=azure-cli#design-considerations "When you back up a key vault object, such as a secret, key, or certificate, the backup operation will download the object as an encrypted blob. This blob can't be decrypted outside of Azure. To get usable data from this blob, you must restore the blob into a key vault within the same Azure subscription and Azure geography." West/East US are in the same geography (United States) : https://azure.microsoft.com/en-us/explore/global-infrastructure/geographies/#geographies So only subscription matters here.

upvoted 1 times

...

Metwally

2 years, 1 month ago

When you back up a key vault object, such as a secret, key, or certificate, the backup operation will download the object as an encrypted blob. This blob can't be decrypted outside of Azure. To get usable data from this blob, you must restore the blob into a key vault within the same Azure subscription and Azure geography. This why KV3 cannot be used .

upvoted 1 times

Alexbz

2 years, 1 month ago

The answers are correct. Same Geography, not same region. United States in one single geography in Azure portal. https://azure.microsoft.com/en-us/explore/global-infrastructure/geographies/#geographies

upvoted 1 times

...

CK9797

2 years, 8 months ago

This question was on my test

upvoted 2 times

sweetykaur

2 years, 8 months ago

How was the exam? I am taking it tomorrow.

upvoted 1 times

ChrisPinas

2 years, 7 months ago

How was the exam? Did u take it online or on exam center? Did u get any simulation question?

upvoted 1 times

...

ChrisPinas

2 years, 7 months ago

Did u take it online or on exam center? Did u get any simulation question?

upvoted 1 times

...

saturation97

2 years, 2 months ago

Fantastic...thanks for sharing

upvoted 1 times

...

Exams_Prep_2021

3 years ago

In Exam - 20/6/2022 - 1 Case Study ( 6 ) - Lab ( 10 Tasks )

upvoted 3 times

...

sbw

3 years, 1 month ago

"same geography" so US East/West all come under one geography - USA. Any Comments?

upvoted 2 times

NadirM_18

3 years ago

Yes, same subscription and same geography (US) but can be in different regions (East US & West US).

upvoted 2 times

...

TJ001

3 years, 6 months ago

Correct answers, same subscription and geography (not region)

upvoted 1 times

...

WhalerTom

3 years, 6 months ago

In exam Dec 21. 40 questions, 1 case study, no labs.

upvoted 3 times

...

jl92

3 years, 7 months ago

# IN EXAM - 19/11/2021

upvoted 1 times

...

SecurityAnalyst

3 years, 10 months ago

# IN EXAM - 31/8/2021

upvoted 3 times

...

Sandomj55

3 years, 11 months ago

In Exam 8/4/2021

upvoted 3 times

neemz

3 years, 11 months ago

Were there any Simulation in exam?

upvoted 1 times

...

wongtony

3 years, 11 months ago

Answers are correct, When you back up a key vault object, such as a secret, key, or certificate, the backup operation will download the object as an encrypted blob. This blob can't be decrypted outside of Azure. To get usable data from this blob, you must restore the blob into a key vault within the same Azure subscription and Azure geography

upvoted 1 times

...

Load full discussion...